Secret Private Quiz

When any entity assess compliance with the security requirements of NIST SP 800-171, they must use:

• The NIST SP 800-171A procedures to evaluate the effectiveness of the tested controls

• The NIST SP 800-88 Revision 1 procedures to evaluate the effectiveness of the tested controls

• The NIST SP 800-53B procedures to evaluate the effectiveness of the tested controls

• The NIST SP 800-171 Revision 2 procedures to evaluate the effectiveness of the tested controls

Certified Assessors will review information and evidence to independently verify that:

• The contractor is aware of the objectives of the required practices

• The contractor meets the stated assessment objectives for all the required practices

• The contractor has implemented all the required controls

• There is an action plan in place to implement all the required practices

PKI stands for:

• Public Key Information

• Public Key Infrastructure

• Performance Key Indicator

• Process Key Indicator

The Property that preserves authorized restrictions on access and disclosure, including means for protecting personal privacy and proprietary information is called:

• Security

• Privacy

• Integrity

• Confidentiality

The application of an assessment procedure to a security requirement produces:

• Assessment findings

• All of these

• Risk Mitigations

• Remediation Plans

Security functions include:

• Employee vetting

• Establishing System Accounts

• Performance Review

• Communication with regulators

To document implementation of NIST SP 800-171, the contractor must develop, document, and periodically update a system security plan that describes:

• All of these

• System environments of operation

• How security requirements are implemented

• System boundaries

Operational controls are:

• Security controls for an information system thare are implemented and executed by systems

• Security controls for an information system that primarily are implemented and executed by people.

• Security controls that primarily are executed by people

• Security controls for na information system that primarily are implemented by people and executed by systems.

External systems include:

• Privately-owned computing

• Personally owned systems

• Components or devices

• All of these

Who determines and confirms the estimate of needed interviews, observations, reviews, and related Evidence that is needed for each practice or process that corresponds to the organizational functional areas and process roles is the:

• CMMC Certified Professional

• Lead Assessor

• Provisional Assessor

• Certified CMMC Assessor